Intro

Let’s say, you found an ntds.dit lying around on your hard disk. What a shame to let it sit there and just eat up disk space. Better extract the hashes and get crackin'.

Option 1

Preparation

• https://blog.joelj.org/windows-password-audit-with-kali-linux/?doing_wp_cron=1448310876.2788469791412353515625

• http://www.harmj0y.net/blog/redteaming/the-case-of-a-stubborn-ntds-dit/

• libesedb

• ntdsxtract

Extraction

Option 2

https://github.com/HarmJ0y/ImpDump

Next Steps

• Improve cracking
• automate script
  • best rules
  • combine available tools
• gather wordlists
  • encoding issues

Resurces

• Windows Password Audit with Kali Linux
• Offensive Security Certified Expert (OSCE) Certification